CVE-2017-2633

Опубликовано: 27 июл. 2018

Источник: nvd

CVSS3: 5.4

CVSS3: 6.5

CVSS2: 4

EPSS Низкий

Описание

An out-of-bounds memory access issue was found in Quick Emulator (QEMU) before 1.7.2 in the VNC display driver. This flaw could occur while refreshing the VNC display surface area in the 'vnc_refresh_server_surface'. A user inside a guest could use this flaw to crash the QEMU process.

Ссылки

http://www.openwall.com/lists/oss-security/2017/02/23/1
Mailing List
Patch
Third Party Advisory
http://www.securityfocus.com/bid/96417
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2017:1205
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:1206
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:1441
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:1856
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2633
Issue Tracking
Patch
Third Party Advisory
https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=9f64916da20eea67121d544698676295bbb105a7
https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=bea60dd7679364493a0d7f5b54316c767cf894ef
http://www.openwall.com/lists/oss-security/2017/02/23/1
Mailing List
Patch
Third Party Advisory
http://www.securityfocus.com/bid/96417
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2017:1205
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:1206
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:1441
Third Party Advisory
https://access.redhat.com/errata/RHSA-2017:1856
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2633
Issue Tracking
Patch
Third Party Advisory
https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=9f64916da20eea67121d544698676295bbb105a7
https://git.qemu.org/?p=qemu.git%3Ba=commitdiff%3Bh=bea60dd7679364493a0d7f5b54316c767cf894ef

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*

Версия до 1.7.2 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:redhat:enterprise_linux_desktop:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:6.0:*:*:*:*:*:*:*

cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 68%

0.0058

Низкий

5.4 Medium

CVSS3

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-120

CWE-125

Связанные уязвимости

CVE-2017-2633

CVSS3: 5.4

ubuntu

почти 7 лет назад

CVE-2017-2633

CVSS3: 5.4

redhat

больше 8 лет назад

CVE-2017-2633

CVSS3: 5.4

debian

почти 7 лет назад

An out-of-bounds memory access issue was found in Quick Emulator (QEMU ...

GHSA-c46f-47cq-c2fg

CVSS3: 6.5

github

около 3 лет назад

SUSE-SU-2018:0039-1

suse-cvrf

больше 7 лет назад

Security update for kvm

EPSS

Процентиль: 68%

0.0058

Низкий

5.4 Medium

CVSS3

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-120

CWE-125